Senior IGA Engineer - SailPoint IdentityIQ (On-Prem)

Description

You will join a team focused on transforming the automotive industry, working on the trusted information that helps people buy, sell and own vehicles.

The company is part of the company and builds products that help the automotive ecosystem move faster with more confidence.

Responsibilities

• Set up, run and maintain the on-premises IdentityIQ platform, covering applications, connectors, rules, workflows and lifecycle events.
• Plan and execute access certifications and recertification campaigns, pushing completion rates up and resolving exceptions.
• Build and improve joiner, mover and leaver workflows, including provisioning and deprovisioning in IdentityIQ.
• Create and maintain RBAC and ABAC roles and entitlement models that make access simpler and cut excess permissions.
• Apply Segregation of Duties policy and controls, mapped to the Cyber Resilience control framework.
• Produce governance evidence such as certifications, access reviews and orphaned-account reports that go straight into audit and resilience reporting.
• Take ownership of IdentityIQ patching, upgrades, performance and connector stability in the on-prem environment.
• Write up configuration and standards, train a backup owner, and eliminate single points of failure around IdentityIQ.

Requirements

• Required: 6+ years in identity governance or IAM, with solid hands-on work in SailPoint IdentityIQ.
• Required: deep IdentityIQ knowledge across applications, connectors, lifecycle events, certifications, roles, workflows and BeanShell rules.
• Required: experience owning an on-prem platform, including installation, configuration, upgrades and performance tuning.
• Required: working knowledge of access certification, JML, RBAC and ABAC role design and Segregation of Duties.
• Required: scripting and integration skills in Java, BeanShell and SQL, plus connector setup for varied target systems, with an audit and compliance mindset.
• Preferred: SailPoint IdentityIQ Engineer or Architect certification, or equivalent proven expertise.
• Preferred: experience planning an IGA modernization, such as moving from on-prem to SaaS or ISC, or a hybrid setup.
• Preferred: familiarity with PAM and access management integration points.
• Preferred: exposure to agentic AI used for first-line access review with human-in-the-loop controls.

Conditions

Hybrid role. In-office expectations depend on your location and may change as business needs evolve.

You must be legally authorized to work in Canada when you are hired. The company cannot provide immigration or work permit support for this role.

The anticipated annual base salary is $104,000 - $156,000. Your actual pay within that range depends on location, experience, skills, qualifications and internal equity.

The company sets pay to reflect local market conditions and individual contributions.

Benefits

• Competitive pay, with base salary plus incentive opportunities where applicable.
• Long-term incentives and a broad benefits package, where applicable.
• Health and wellness coverage for you and eligible dependents.
• Retirement savings plans, with company matching contributions where available.
• Full benefit details are published on the company's benefits website.